Vulnerabilities exploitable today
406,102in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,764
New KEV · 24H0
Exploit Today ≥ 701,697
Distribution · last window
- Critical5,626
- High21,914
- Medium20,413
- Low2,121
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2019-0770—94.8%
——28——CVE-1999-1237—94.8%
——28——CVE-2004-1848—94.8%
——28——CVE-2020-15615—94.8%
——28——CVE-2001-0183—94.8%
——28——CVE-2001-1408—94.8%
——28——CVE-2020-15431—94.8%
——28——CVE-2010-0136—94.8%
——28——CVE-1999-0950—94.8%
——28——CVE-2020-15608—94.8%
——28——CVE-2017-3207—94.8%
——28——CVE-2013-0442—94.8%
——28——CVE-2004-1763—94.8%
——28——CVE-2019-0783—94.8%
——28——CVE-2007-3947—94.8%
——28——CVE-2002-0006—94.8%
——28——CVE-2007-3006—94.8%
——28——CVE-2026-82276.3 MED94.8%
——28A weakness has been identified in Wavlink NU516U1 240425. This issue affects the function wzdapMesh of the file /cgi-bin/adm.cgi. This manipulation causes os command injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.99dCVE-2007-5156—94.8%
——28——CVE-2018-16618—94.8%
——28——CVE-2022-35741—94.8%
——28——CVE-2013-1638—94.8%
——28——CVE-2015-1371—94.8%
——28——CVE-2026-584559.8 CRI94.8%
——28Dockwatch through 0.6.567 contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary shell commands by exploiting a missing exit() after an authentication redirect in loader.php combined with unsanitized input passed to shell_exec() in ajax/compose.php. Attackers can seed the required session flag through the incomplete auth check, then inject arbitrary commands via the composePath POST parameter in the composePull action to achieve full host compromise, facilitated by the standard deployment mounting of the Docker socket.5dCVE-2002-0733—94.8%
——28——CVE-1999-1069—94.8%
——28——CVE-2018-5042—94.8%
——28——CVE-2007-4583—94.8%
——28——CVE-2015-0202—94.8%
——28——CVE-2019-199267.5 HIG94.8%
——28multiSelect in select.c in SQLite 3.30.1 mishandles certain errors during parsing, as demonstrated by errors from sqlite3WindowRewrite() calls. NOTE: this vulnerability exists because of an incomplete fix for CVE-2019-19880.17dCVE-2007-1581—94.8%
——28——CVE-2007-4672—94.8%
——28——CVE-2016-1453—94.8%
——28——CVE-2017-14523—94.8%
——28——CVE-2008-0763—94.8%
——28——CVE-2021-41833—94.8%
——28——CVE-1999-1508—94.8%
——28——CVE-2018-20664—94.8%
——28——CVE-2017-7056—94.8%
——28——CVE-2007-1993—94.8%
——28——